OrgACRN
/
acrn-hypervisor
mirror of https://github.com/projectacrn/acrn-hypervisor.git
1
0
Fork 0
Code Issues Releases Wiki Activity

DM: generate random virtual RPMB key 

The virtual rpmb key transfer path is ready now, so replace
previous temporary fixed key solution with random key
solution.

Tracked-On: #1636
Signed-off-by: Qi Yadong <yadong.qi@intel.com>
Acked-by: Zhu Bing <bing.zhu@intel.com>
This commit is contained in:
Qi Yadong 2018-08-23 10:24:44 +08:00 committed by lijinxia
parent dff441a0d5
commit f4f139bf8b
1 changed files with 22 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
devicemodel/core/vrpmb.c
View File

@ -29,19 +29,28 @@
#include <stdio.h>
#include <string.h>
#include <assert.h>
#include <openssl/rand.h>
#include "types.h"
#include "vrpmb.h"
#define DRNG_MAX_RETRIES 5U
struct key_material {
uint8_t key[RPMB_KEY_LEN];
bool initialized;
};
static struct key_material vrkey = { .initialized = false };
static struct key_material vrkey = {
.key = {0},
.initialized = false
};
int get_vrpmb_key(uint8_t *out, size_t size)
{
int ret;
int i;
if (!out) {
fprintf(stderr, "%s: Invalid output pointer\n", __func__);
return 0;
@ -50,10 +59,18 @@ int get_vrpmb_key(uint8_t *out, size_t size)
assert(size == RPMB_KEY_LEN);
if ( vrkey.initialized == false ) {
/* FIXME: Currently the transport path is not ready, so
* use fixed key(all 0) for temporary solution.
*/
memset(vrkey.key, 0, RPMB_KEY_LEN);
for (i = 0; i < DRNG_MAX_RETRIES; i++) {
ret = RAND_bytes(vrkey.key, RPMB_KEY_LEN);
if (ret == 1) {
vrkey.initialized = true;
break;
}
}
if (vrkey.initialized != true) {
fprintf(stderr, "%s: unable to generate random key!\n", __func__);
return 0;
}
}
memcpy(out, vrkey.key, size);